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IN THE CLAIMS 

Please amend the claims as follows: 

Claims 1-23 (Canceled). 

Claim 24 (Original): A method of encrypting plural variables and mapping 
components of multivariate mappings, represented, with univariate mappings of an 
appropriate representation, comprising the steps of: 

A. determining a representation for the encryption; 

B. replacing each variable to be decrypted Xj with a decrypted equivalent s e +i(xj); 

C. composing the decrypted equivalents with a mapping h; and 

D. composing each mapping component to be encrypted, hi, with an encryption 
function r*, to create rj(hi(. . .)). 

Claim 25 (Original): The method as claimed in claim 24, wherein the multivariate 
mappings comprise mappings represented as one of function tables and polynomials. 

Claims 26-33 (Canceled). 

Claim 34 (Original): A method of generating keys for multivariate encryption of 
multivariate mappings, comprising the steps of: 

A. determining a representation for the keys; 

B. defining for an i th key triple two temporary N Ci x (c ( + 1) arrays R and S; 

C. defining a temporary polynomial f to translate from base-N vectors to base- N Cf 
vectors with Ci components; and 
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D. permuting a ring Z ei , and simultaneously translating a permutation and its 

inverse to a field Z£ for every key triple; 

E. repeating steps B-D for all triples not set equal to identity. 

Claim 35 (Original): The method as claimed in claim 34, wherein the mappings to be 
encrypted are expressed using polynomials, further comprising the step of computing the 
permutation and its inverse by interpolation, using at least a portion of R and S as 
interpolation data, using ai(x), once for each unique key triple that is to be generated. 

Claim 36 (Original): The method as claimed in claim 34, further comprising the step 
of setting all key triples that are to do neither encryption nor decryption to the identity 
mapping. 

Claim 37 (Original): The method as claimed in claim 34, further comprising the steps 
of (1) pre-computing arithmetic operations over the field Z N and (2) pre-computing 
coefficients of the functions aj(x), wherein the steps of permuting comprises using the pre- 
computed aj(x). 

Claim 38 (Original): The method as claimed in claim 34, further comprising the step 
of restricting a new set of key triples based on a pattern of encryption used during an 
encryption of the first multivariate polynomials. 

Claim 39 (Original): A method of encrypting plural groups of variables and groups of 
mapping components of multivariate mappings, with other multivariate mappings, 
comprising the steps of: 



3 



Application No. 09/737,742 

Reply to Office Action of March 8, 2005 

A. determining a mapping representation for encryption; 

B. replacing each group of encrypted variables w t with a decrypted equivalent 

C. composing each of the decrypted equivalents with a mapping h; and 

D. composing each group of mapping components to be encrypted v; with r ; giving 
r,(vi(...)). 

Claims 40-67 (Canceled). 
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